High/Medium/Low severity rankings applied to these to help prioritize - points out some easy wins - which policies to start enforcement on and how to prioritize.